18485 matches found
CVE-2022-43699
OX App Suite before 7.10.6-rev30 allows SSRF because e-mail account discovery disregards the deny-list and thus can be attacked by an adversary who controls the DNS records of an external domain found in the host part of an e-mail address...
CVE-2022-43699: Server-Side Request Forgery (SSRF)
OX App Suite before 7.10.6-rev30 allows SSRF because e-mail account discovery disregards the deny-list and thus can be attacked by an adversary who controls the DNS records of an external domain found in the host part of an e-mail address...
PT-2023-14291
Name of the Vulnerable Software and Affected Versions OX App Suite versions prior to 7.10.6-rev30 Description The issue allows for Server-Side Request Forgery SSRF due to e-mail account discovery disregarding the deny-list. This can be exploited by an adversary who controls the DNS records of an...
CVE-2018-17883
An issue was discovered in Open Ticket Request System OTRS 6.0.x before 6.0.12. An attacker could send an e-mail message with a malicious link to an OTRS system or an agent. If a logged-in agent opens this link, it could cause the execution of JavaScript in the context of OTRS...
[SECURITY] Fedora 36 Update: thunderbird-102.9.1-1.fc36
Mozilla Thunderbird is a standalone mail and newsgroup client...
Fedora: Security Advisory for thunderbird (FEDORA-2023-d365f19e05)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mozilla Thunderbird resource management error vulnerability
Mozilla Thunderbird is the United States Mozilla Foundation's set of independent from the Mozilla Application Suite e-mail client software. The program supports IMAP and POP mail protocols as well as HTML mail format. A security vulnerability exists in Mozilla Thunderbird due to improper memory...
Mozilla Thunderbird Trust Management Vulnerability
Mozilla Thunderbird is the United States Mozilla Foundation's set of independent from the Mozilla Application Suite e-mail client software. The program supports IMAP, POP mail protocols and HTML mail format. A security vulnerability exists in Mozilla Thunderbird, which can be exploited to conduct...
Pinacolada - Wireless Intrusion Detection System For Hak5's WiFi Coconut
Pinacolada looks for typical IEEE 802.11 attacks and then informs you about them as quickly as possible. All this with the help of Hak5's WiFi Coconut, which allows it to listen for threats on all 14 channels in the 2.4GHz range simultaneously. Supported 802.11 Attacks Attack | Type | Status...
[SECURITY] Fedora 37 Update: thunderbird-102.10.0-1.fc37
Mozilla Thunderbird is a standalone mail and newsgroup client...
Ransomware in the UK, April 2022–March 2023
This article is based on research by Marcelo Rivero, Malwarebytes' ransomware specialist, who monitors information published by ransomware gangs on their dark web sites. In this report, "known attacks" are attacks where the victim opted not to pay a ransom. This provides the best overall picture ...
CVE-2023-26986
An issue in China Mobile OA Mailbox PC v2.9.23 allows remote attackers to execute arbitrary commands on a victim host via user interaction with a crafted EML file sent to their OA mailbox...
Fedora: Security Advisory for thunderbird (FEDORA-2023-a9c17dff60)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-28854 nophp vulnerable to shell command injection on httpd user when sending a password-setting mail or mail-login mail
nophp is a PHP web framework. Prior to version 0.0.1, nophp is vulnerable to shell command injection on httpd user. A patch was made available at commit e5409aa2d441789cbb35f6b119bef97ecc3986aa on 2023-03-30. Users should update index.php to 2023-03-30 or later or, as a workaround, add a function...
org.apache.james.examples:custom-james-assembly (>=3.7.0, <=3.7.3), org.apache.james.examples:custom-mailets (>=3.6.0, <=3.7.3) +140 more potentially affected by CVE-2023-26269 via org.apache.james:javax-mail-extension (>=3.1.0, <=3.7.3)
org.apache.james:javax-mail-extension MAVEN version =3.1.0, =3.7.0, =3.6.0, =3.7.0, =3.7.0, =3.4.0, =3.4.0, =3.6.0, =3.1.0, =3.1.0, =3.7.0, =3.4.0, =3.1.0, =3.1.0, =3.7.0, =3.7.3 and more Source cves: CVE-2023-26269 Source advisory: OSV:GHSA-W7R6-V4J7-H94Whttps://vulners.com/osvghsa/OSV:GHSA-W7R6...
org.apache.james.examples:custom-james-assembly (>=3.7.0, <=3.7.3), org.apache.james.examples:custom-mailets (>=3.6.0, <=3.7.3) +140 more potentially affected by CVE-2023-26269 via org.apache.james:javax-mail-extension (>=3.1.0, <=3.7.3)
org.apache.james:javax-mail-extension MAVEN version =3.1.0, =3.7.0, =3.6.0, =3.7.0, =3.7.0, =3.4.0, =3.4.0, =3.6.0, =3.1.0, =3.1.0, =3.7.0, =3.4.0, =3.1.0, =3.1.0, =3.7.0, =3.7.3 and more Source cves: CVE-2023-26269 Source advisory: GHSA-W7R6-V4J7-H94W...
org.apache.james.examples:custom-james-assembly (>=3.7.0, <=3.7.3), org.apache.james.examples:custom-mailets (>=3.6.0, <=3.7.3) +140 more potentially affected by CVE-2023-26269 via org.apache.james:javax-mail-extension (>=3.1.0, <=3.7.3)
org.apache.james:javax-mail-extension MAVEN version =3.1.0, =3.7.0, =3.6.0, =3.7.0, =3.7.0, =3.4.0, =3.4.0, =3.6.0, =3.1.0, =3.1.0, =3.7.0, =3.4.0, =3.1.0, =3.1.0, =3.7.0, =3.7.3 and more Source cves: CVE-2023-26269 Source advisory: MEND:CVE-2023-26269...
Multiple Stored XSS via mail parameter
Description In PhpMyFaq, while submitting a question, the mail parameter is accepting unsanitized user input which leads to Stored XSS vulnerability, executing on Admin Panel /admin/?action=question. Proof of Concept 1. Go to https://roy.demo.phpmyfaq.de/index.php?action=ask&categoryid=0 1. Fill ...
